This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          ikVZuLThJ7zzrZPyFnOTDgMtWnYUIo2zYugB0GSqAr0=
Subject key identifier:   DF:5C:4C:25:BC:82:EA:D9:DD:62:CE:BE:49:7F:97:E2:DB:43:0B:97
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       019C41D8D11D57110293AC23C967E53E8396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          12E5
Signing time:             Mon 09 Feb 2026 10:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:54 +0000
Files and hashes:         1: LaPWaYnRdzPOHVggeMAoRuWpL4k.roa (hash: CbyTkBWUaIRYJheYloFSm5P53K+AiwdJChkgXRTNeqo=)
                          2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: nx7JuVbFE0BJvFfeYzwiPyQiGOjE1zjX1FOTyGmqHBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d1:1d:57:11:02:93:ac:23:c9:67:e5:3e:83:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Feb  9 10:00:54 2026 GMT
            Not After : Feb 10 10:00:54 2026 GMT
        Subject: CN=df5c4c25bc82ead9dd62cebe497f97e2db430b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:7b:e3:73:ab:48:65:0d:c0:17:ff:3b:80:
                    dd:cb:2f:37:e7:87:c8:33:0e:e6:f8:c3:07:a3:ac:
                    9d:74:ad:56:bb:36:dd:38:cd:50:9f:ab:45:ac:50:
                    11:77:8e:c8:cd:eb:1f:9c:77:6c:13:8b:47:eb:df:
                    7f:41:27:d9:53:a0:66:39:cc:fb:5a:d0:0e:74:3e:
                    c7:46:c1:ae:e7:3e:fc:53:d1:c8:dd:2f:e4:d6:39:
                    2f:a2:56:4b:76:15:a7:94:4e:66:81:e9:61:f9:2c:
                    ec:0a:ec:9d:51:35:df:9f:b2:82:94:53:b2:12:64:
                    c9:b0:32:76:dd:a3:63:bc:fe:3f:de:30:1d:94:5c:
                    a9:c3:bd:98:2a:b6:34:a7:ab:07:6a:5e:a0:b3:90:
                    99:8a:13:be:9e:28:28:fd:eb:72:8a:91:f3:25:59:
                    52:a9:89:db:32:e5:cc:a8:93:25:2a:6c:1a:1a:62:
                    72:ed:a7:24:4b:27:a0:58:99:97:18:f6:bf:a7:15:
                    e2:ab:89:cf:6e:cd:22:50:6b:70:41:18:e0:88:51:
                    15:d4:68:2a:10:88:0f:70:be:d5:43:55:ea:0b:29:
                    f9:a4:d9:4d:e2:bc:e5:bc:0f:bb:59:5b:18:55:15:
                    f6:12:63:9f:41:a5:77:4e:af:c3:46:68:dd:6f:34:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5C:4C:25:BC:82:EA:D9:DD:62:CE:BE:49:7F:97:E2:DB:43:0B:97
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:8d:2e:a1:5e:52:24:b8:de:3d:b6:4c:ae:13:96:5a:0e:
         c9:aa:e7:43:82:a8:9a:37:11:5e:1f:77:28:95:84:bf:11:bc:
         d5:b6:32:85:92:86:86:f6:c7:12:e8:b3:06:7c:8e:35:73:61:
         49:e6:f8:05:8c:29:ab:09:31:05:a9:58:79:b4:6d:28:36:e4:
         13:58:2c:56:88:e0:b6:06:7e:66:3e:7a:47:0d:8b:8c:07:7e:
         54:72:6d:88:39:7c:44:77:a2:6a:b2:81:35:2d:d7:10:b4:dc:
         ed:0d:a7:8b:e3:38:43:38:c0:5d:54:95:ad:48:1f:11:45:13:
         c1:70:40:3c:30:dd:fd:72:cd:65:be:52:c4:5e:b5:0d:98:27:
         65:9e:54:91:88:c1:02:c5:77:35:b4:71:e0:de:fd:b5:ca:71:
         94:00:30:1b:b2:27:02:cf:f1:9e:f3:f2:ee:68:38:a2:cb:b8:
         d6:b1:83:85:f6:34:87:c7:16:c2:31:3c:bf:46:61:dc:43:01:
         8a:07:2c:57:bb:94:c4:f8:6d:ee:98:dd:37:34:0c:11:39:ec:
         b6:a9:a2:03:79:ec:cf:68:56:be:24:b6:37:4a:e5:55:ac:3b:
         75:12:83:f4:4f:e3:3d:90:5d:c8:e7:8b:22:99:99:3f:4c:72:
         ca:e1:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:19 2026 by rpki-client